In this video I go over everything that I discovered while researching the recent LHR Unlocker Virus! Huge thanks to Y3ti, https://www.youtube.com/channel/UCF55FYkyzzahf0_r4yj3K3Q and https://www.youtube.com/channel/UCAGsnTCpw7pvhR4RAlEQGzg !! Red Panda's Livestream: https://www.youtube.com/watch?v=Cpnk_ItUiLc ChumpchangeXD's livestream: https://www.youtube.com/watch?v=PR6lQqQq_II My Discord: https://discord.gg/WEekeejA56 My website for Hashrates: https://hashsearch.tech/ Notes: A software like this usually comes pre-packaged for the hacker, meaning that he might choose to use one or more part of it, and not all of it. Even though a virus scan says that there is this virus among other virus' it might not be in use. backdoor = a open port on you pc with access to do whatever, also known as a RAT (Remote access trojan) Trojan = Hides it's functionality, known to do things such as a ddos, spamming, keylogging or unknowingly running a background process. ddos = when you send multiple requests to a server to bog it down keylogging = logging usernames and passwords FileRepMalware COULD BE "KMSPIBO" aka Win32:Evo-gen[Susp] Can activate Windows without buying a copy of windows. Probably not this, so it's unknown. https://appuals.com/what-is-filerepmalware-and-should-you-remove-it/ Gen:NN.ZemsilF.34232.jm0@aWzx0un backdoor https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Backdoor%3AWin32%2FQakbot.gen!A Trojan.downloaderNET.324 Trojan spyware evader from defender and maybe ransomware? https://www.joesandbox.com/analysis/368924/0/lighthtml Trojan.spy Trojan Spyware (Pretty self explanatory) https://www.google.com/search?q=trojan.spy&oq=trojan.spy&aqs=chrome.0.69i59j0i512l2j0i30l7.4139j0j4&sourceid=chrome&ie=UTF-8 trojan.malware.300983.susgen malware disguises harmful processes as background windows processes. https://www.google.com/search?q=trojan.malware.300983.susgen&sxsrf=APq-WBt3y3u5sAvQAEDE6GxCezJKNCK5wQ%3A1645649151838&ei=_5wWYufNMpK2ggessbT4Dg&ved=0ahUKEwinyfro2Jb2AhUSm-AKHawYDe8Q4dUDCA4&uact=5&oq=trojan.malware.300983.susgen&gs_lcp=Cgdnd3Mtd2l6EAMyBAgjECc6BwgjELADECc6BwgAEEcQsAM6DwguENQCEMgDELADEEMYADoHCAAQsQMQQzoNCAAQgAQQhwIQsQMQFDoICAAQgAQQsQM6BQgAEIAEOgcIIxDqAhAnSgQIQRgASgQIRhgAULkGWPkNYO8PaAJwAXgCgAFQiAGPBJIBATeYAQCgAQGgAQKwAQrIAQvAAQHaAQQIABgI&sclient=gws-wiz Arternis|Trojan Trojan that limits the users actions, usually tied with ransomware. https://www.enigmasoftware.com/artemistrojan-removal/ Malicious Unknown generic ml pua Ransomware Malware https://howtofix.guide/generic-ml-pua-pua/ Generic.mg1870bb66ef6d3dfd Trojan's that start with Generic are just trojans that are so new or so obscure that they're undocumented. win/malicious_confidence_60% (w) Displaying popup ads Hijacking your browser Infecting your desktop shortcuts, etc. Inserting ads to the web pages This article describes it as "crapware" http://malwarefixit.com/howto/remove-uninstall-malicious_confidence_60-w-virus.htm VHO:Trojan-downloader.MSIL.Seraph.gen Goes and downloads something without the user's permission or knowledge . https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=TrojanDownloader:MSIL/Seraph.MR!MTB&ThreatID=2147783313 Artermis|1870bb66EF6D Probably the same thing as Generic.mg1870bb66ef6d3dfd Googling this leads to nasa website lol. No other information. Trojan:Win32/Sabsik.FL.B!ml This can do a long list of things, I highly recommend going to the website I have linked to see, but here are some things that it does. Backdoor hides applications steals information attempts to use powershell creates hidden system files checks for virtualization and much, much more. This was probably what would allow the hacker to steal crypto. https://howtofix.guide/trojanwin32-sabsik-fl-bml/ static ai - suspicious pe Malware detector? Scan executable files, probably be used for something else. https://www.cyberbit.com/blog/endpoint-security/machine-learning-for-cyber-security-static-detection/ ml.attribute.highconfidence Unknown Trojan, but likely related to application data and user data. https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/troj_ursu.tieadaj Wanna support the channel? Send some Bitcoin! Address: 167ygjRfssXSmPAodpepB543baRmNWnqop